Privacy Policy

  1. Privacy Policy

    LAST UPDATE: December 2025

    INFORMATION ON THE PROCESSING OF PERSONAL DATA
    A. Subjects of the agreement:

    In accordance with art. 13 of European Regulation no. 2016/679 “General data protection regulation” (hereinafter “GDPR”)

    Exelite S.p.A. (già Liu Jo S.p.A) based in Viale J.A. Fleming 17, 41012, Carpi (MO), Italy
    E-mail: privacyconsumer@liujo.it
    (hereinafter “LIU JO”)

    e

    Digital Boite S.r.l. based in Via Cusani 5, 20122 Milan, Italy,
    E-mail: dpo@digitalboite.com
    (hereinafter “DB”)

    (hereinafter collectively the "Controllers") provide you with the following information on the collection, usage, sharing and processing of your personal data carried out via the website www.liujo.com (hereinafter "Website"), the LIU JO application for mobile devices (hereinafter "App") or any other point of sale forming part of the network of LIU JO stores.

    In detail:

    • LIU JO is the owner of the Website and the App and is the autonomous controller of the personal data processed for the purpose of marketing and profiling;
    • DB is an autonomous controller of personal data processed for the purposes of sales, invoicing, payments and shipments of products purchased via the Website or the App;
    • LIU JO and DB are joint controllers of personal data processed for the purposes of:
      • registration on the site and/or the app;
      • operation of customer service and post-purchase services;
      • operation of multi-channel services.

    The main content of the joint agreement between LIU JO and DB is stated in the following table. Any further information relating to the content of the below joint Controller agreement may be requested by writing to LIU JO or DB at the addresses stated above, or by contacting the DPO by writing to the email indicated in the following section.

    Parties involved Purpose Data Processing Under Joint Controllership Regimen Types of data
    Customers User registration on the Website and the provision of services for registered users
    (eg. wishlist, order management, etc.)     		Operation of the services reserved for registered customers
    (eg. wishlist, order management, etc.)

    Operation of the e-commerce platform and other technology     		Common personal data
    (eg. name, surname, email, password, sex, date of birth, browsing data)
    Customers Management of Customer Service and Post-Sales Service via the Online B2C Store Processing of queries relating to:
    • Information on products;
    • Purchases in store;
    • Anti-counterfeiting;
    • Size guide;
    • Website registration;
    • Payments;
    • Shipping;
    • Return and Refunds;
    • Technical assistance;
    • Operation of the e-commerce platform and other technology.
    		 Common personal data (e.g. name, surname, email)
    Customers Operation of multi-channel services Management of requests relating to the use of multichannel services offered, which require the direct involvement of the stores Common personal data
    (e.g. name, surname, email)

    For further information on the personal data processed while using the Website and/or App, see paragraph I below.

    For further information on the personal data processed by the use of cookies and other similar tracking technologies, please see our Cookie Policy.

    B. Date protection officer (DPO)

    LIU JO and DB have both nominated a data protection officer (DPO):

    • The data protection officer (DPO) for LIU JO can be contacted at the following email address dpo@liujo.it;
    • The data protection officer (DPO) for DB can be contacted at the following email address dpo@digitalboite.com.

    C. Categories of data processed

    According to the intended purposes, we will process the following personal data, for example and not limited to:

    • Personal data: name, surname, date of birth, sex;
    • Contact data: telephone number, email address;
    • Authentication data: username, password;
    • Shipping information: home address, residential address, any additional addresses needed to deliver the order;
    • Invoicing and tax free data: billing address, name and surname, company name, fiscal code, VAT number, nationality, passport number;
    • Information on purchases made: items, size and colour, price, date of purchase, price paid;
    • Data relating to the customer's profile and preferences: data on behaviour and purchases;
    • Browsing data: data collected during the visit and usage of the Website or the App, including via cookies or other tracking technologies (For further information on the processing of your data via such technologies, please see the Cookie Policy.
    • Data related to geographical position (store locator service): IP address;
    • Loyalty program data: points, clusters, discounts, vouchers.

    Possible further data transmitted in order to make use of specific services offered by LIU JO.

    D. Purpose, legal basis for the processing and retention periods of the data

    Purpose Legal basis Period of retention
    Provision of retail services and of any further service requested by the customer in store Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR The data relating to purchases will be stored for the duration necessary for the execution of the contract relating to the services offered to you, and therefore not longer than 10 years from the completion of the contract, save for other data retention periods
    Execution of Assistance and Post-Sales Support services for in-store customers, such as carrying out the administrative, fiscal and accounting activities required by law, as well as support services relating to payment, shipping, returns and refunds, as well as other services offered by LIU JO. We would like to inform you that a generative artificial intelligence chatbot is available on the website to facilitate and simplify communication, as well as provide replies. The chatbot can answer both general questions (for which it is not necessary to provide your personal data) and specific questions for which you will be asked to log in or provide more information to allow your request to be processed (e.g., order number, email address associated with your loyalty account). If you wish to speak directly with an operator, we ask that you use traditional channels and do not initiate the conversation with the chatbot. If the chatbot does not provide you with the reply you need, you can use it to get all the information required to contact a human operator or use the traditional methods provided on the website. Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR Data processed for the purpose of providing a service requested by you will be retained for the period necessary to carry out the service, or until you request the revocation of your registration for the service. The data processed in order to respond to your requests will be retained until the matter is resolved and for a further period of 6 months. Data processed in order to comply with legal obligations will be stored according to the period provided for in the applicable regulation
    Compliance with a legal obligation which the data controller is subject to, in accordance with art. 6.1 lett. c) of the GDPR
    Operational management of browsing and security of the Website and the App Legitimate interest of the Controller for the data processing, in accordance with art. 6.1 lett. f) of the GDPR 7 days from the date on which the site or app was visited For data on cookies, please see the specific Cookie Policy
    Execution of the contract of sale and online post-sales activities, such as carrying out the administrative, fiscal and accounting activities required by law, as well as support services relating to payment, shipping, returns and refunds. We would like to inform you that a generative artificial intelligence chatbot is available on the website to facilitate and simplify communication and provide replies on support services, such as payments, shipping, returns, and refunds). The chatbot can answer specific questions (e.g., shipping status; returns) and will ask you to log in or provide more information to process your request (e.g., order number, email address associated with your loyalty account). If you wish to speak directly with an operator, we ask that you use traditional channels and do not initiate the conversation with the chatbot. If the chatbot does not provide you with the reply you need, you can use it to get all the information required to contact a human operator or use the traditional methods provided on the website. Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR The need to fulfil the obligations provided for in the national or international regulation which the data controllers are subject to, in accordance with art. 6.1 lett. c) of the GDPR, for example, the fulfilment of fiscal and accounting obligations. The data will be stored for the duration necessary for the execution of the contract, and in accordance with the legal or conventional requirements, and following the completion of the contract, and no longer than 10 years, save for other data retention periods provided for in the applicable regulations. The data processed in order to respond to your requests will be retained until the matter is resolved and for a further period of 6 months. Data processed in order to comply with legal obligations will be stored according to the period provided for in the applicable regulation.
    Registration on the website or the app and the provision of services for registered users., Such a registration can be made by completing the form for the collection of current data on the Website or on the App.. Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR Personal data collected for the purpose of registering on the Website or App will be retained until you decide to withdraw your registration
    Provision of online customer service, including technical support to recover login data for your personal account Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR Data processed for the purpose of providing a service requested by the user will be retained for the period necessary to carry out the service, or until you request the revocation of your registration for the service. The data processed in order to respond to customer requests will be retained until the matter is resolved and for a further period of 6 months.
    Use of multichannel services offered to the customer, for example, but not limited to, the Click&Collect or Reserve in Store service Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR The data will be retained for the period necessary to provide the service, or until you decide to revoke your subscription to the service.
    Use of the store locator service, which involves finding the closest store based on your current location Free, specific, informed, unambiguous and revocable consent of the party in accordance with art. 6.1 lett. a) of the GDPR The data will be retained until you decide to revoke your consent
    Prevention of crime and fraud Legitimate interest of the Controller for the data processing, in accordance with art. 6.1 lett. f) of the GDPR Data collected via the Website or the App will be retained for not more than 180 days
    Inspection, exercise or defence of rights in court and extra-judicial credit recovery Legitimate interest of the Controller for the data processing, in accordance with art. 6.1 lett. f) of the GDPR The data will be retained for the full duration of the credit recovery process and in the case of a legal disagreement, for the duration of the same, until the expiry of the period in which complaints may be lodged
    Sending of "soft spam" communications via email, namely commercial communications regarding products and services similar to those you have purchased Derogation granted by art. 130, paragraph 4, of the Privacy Code The personal data will be retained until a request to stop receiving such emails is received, which may be requested via the link available at the bottom of each of these communications
    Marketing activities, such as the sending of communications of a commercial nature about products and services (news, new arrivals, exclusives, offers and promotions), sending the newsletter and for the carrying out of market research and surveys to record the level of customer satisfaction with the aim of improving our services and customer relations Free, specific, informed, unambiguous and revocable consent of the party in accordance with art. 6.1 lett. a) of the GDPR Personal data collected for marketing purposes will be retained until you decide to withdraw your registration on the Website or the App, or until you revoke your consent to the processing of personal data. Personal data relating to the details of purchases which is processed for marketing purposes will be retained for 24 months from the date of recording. On expiry of the retention periods indicated above, the data will automatically be deleted or made permanently and irreversibly anonymous
    Profiling activities using the navigation and shopping habits of registered users using the data provided by the users, data provided by the use of the Website or the App, and from data relating to the details of purchases made on the Website or the App in order to send personalised commercial communications according to the user's interests Free, specific, informed, unambiguous and revocable consent of the party in accordance with art. 6.1 lett. a) of the GDPR Personal data collected for profiling purposes will be retained until you decide to withdraw your registration on the Website or the App, or until you revoke your consent to the processing of personal data. Personal data relating to browsing and details of purchases which are processed for profiling purposes will be retained for 24 months. On expiry of the retention periods indicated above, the data will automatically be deleted or made permanently and irreversibly anonymous.
    Selection of employees, such as the storage and management of application and documents (such as the CV) which were submitted through the "Work with us" section of the website Execution of a contract in which the party is involved or for pre-contractual steps requested by that party, in accordance with art. 6.1 lett. b) of the GDPR The personal data collected will be stored for the period strictly necessary for the selection of candidates for the individual positions, and no longer than 12 months from the time of their communication. Prior to the expiry of the retention period, the Data Controllers may contact you to verify your continued interest in being considered for any open positions. In case of a negative response or lack of response, your personal data will be deleted. In the case your provide a positive response, the Controllers will retain your data for an additional 12 months.

    E. Sharing of Data

    The disclosure of data to fulfil these purposes based on the conditions of lawfulness as per art. 6.1 lett. b), c) and f) of the GDPR are necessary to be able to pursue the purposes mentioned above. With reference to the use of the chatbot, if you do not intend to use the chatbot, you may contact a human operator and/or use the traditional methods published on the site. The disclosure of data for the purposes for which a legal basis of consent is provided, as per art. 6.1 lett. a) of the GDPR, is purely voluntary and the lack of disclosure of data or the lack of consent provided precludes the pursuance of the purposes related to profiling, marketing and enhancement of the data, but without prejudice to your possibility to register on the Website or on the App, or to make use of services provided on a contractual basis. During their normal operation the ID systems and software procedures used to operate this website or this app acquire some personal data whose transmission is implicit in using Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could allow users to be identified through processing and associations with data held by third parties. Included among the information that may be collected are the IP address, the type of browser or operating system used, addresses in URI form (Uniform Resource Identifier), the domain name and the website address from which the Website was accessed or left for (referring/exit pages), the time in which the server request was carried out, the method used and information on the response received, other information on the user's browsing (please also see the section on Cookies) and other parameters relevant to the operating system and computer environment of the user. This same data may also be used to identify and verify responsibility in the case of possible cyber crimes against the Website or the App.  

    F. Recipients of the Personal Data

    The data will be processed by:

    a. employees and associates of the Controllers of the data (including staff at physical stores) who are authorised to collect, use, share or process your personal data;

    b. employees and associates of DB, who are responsible for data processing regarding the management of marketing and profiling activities on behalf of LIU JO;

    c. third parties located within the European Union, which are responsible for processing and are employed by the data controllers, in particular, for services for the acquisition of and integration of personal data, shipping services, mailing of promotional materials, for the services made available on the site (e.g., chatbot), market research, surveys on customer satisfaction, and the management and maintenance of informatics systems;

    d. third parties, autonomous data controllers, in particular freelancers or consulting firms, legal or financial assistance companies, and debit or credit card payment processing services;

    e. third parties, autonomous data controllers such as supervisory and control authorities or other public or private entities that are entitled to request the data.

    The complete list of recipients of personal data can be requested by writing to the addresses indicated above in paragraph A.

    G. Transfer of Data outside of the European Union

    Your personal data may be transmitted outside of the European Economic Area (for example to Albania, for the purpose of customer assistance provided by the call center). LIU JO undertakes to guarantee that this transmission happens in accordance with CHAPTER V of the GDPR. In particular, adequate security measures and appropriate methods of transmission (for example, the standard contractual clauses approved by the European Commission) will be implemented to guarantee a standard of protection equivalent to that which is expected within the EEA.

    H. Rights of the Interested Parties

    Contacting the email addresses given above in paragraph A, you may request from the data Controllers access to the data relating to you, deletion of the data, correction of errors in the data, additions to incomplete data, and the limitation of processing of the data in the cases provided for in art. 18 of the GDPR. You may also oppose the processing of your data the in Controller's legitimate interest for reasons relating to your particular situation. Where the processing is based on consent or on the contract and is performed by automated tools, you also have the right to receive your data in a structured, commonly used and machine-readable format, as well as, if technically possible, you may request that this data is transmitted to the other Controller without prejudice. You have the right to revoke your consent at any moment for the purposes of marketing and/or profiling, as well as to oppose data processing for marketing purposes, including profiling connected to direct marketing. If you prefer, you can request to be contacted for the purposes mentioned above exclusively in traditional ways, and you may register your opposition only to receiving automated communications. Furthermore, you have the right to file a complaint with the competent oversight authority in the member state in which you usually reside or work, or in the state in which the alleged violation took place.

    Lastly, you may modify or update your personal data and your consent to the processing of personal data at any time by accessing your personal account or by sending an email to dpo@liujo.it or alternatively, to privacyconsumer@liujo.it.